{"id":"https://openalex.org/W4403854610","doi":"https://doi.org/10.1145/3699602","title":"Less Is More: Unlocking Semi-Supervised Deep Learning for Vulnerability Detection","display_name":"Less Is More: Unlocking Semi-Supervised Deep Learning for Vulnerability Detection","publication_year":2024,"publication_date":"2024-10-29","ids":{"openalex":"https://openalex.org/W4403854610","doi":"https://doi.org/10.1145/3699602"},"language":"en","primary_location":{"id":"doi:10.1145/3699602","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3699602","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-3","norway-2"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047060039","display_name":"Xiao Hua Yu","orcid":"https://orcid.org/0000-0002-4473-3068","observed_orcids":["https://orcid.org/0000-0002-4473-3068"]},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao Yu","raw_affiliation_strings":["Huawei, Hangzhou, China","Huawei, China"],"raw_orcid":"https://orcid.org/0000-0002-4473-3068","affiliations":[{"raw_affiliation_string":"Huawei, Hangzhou, China","institution_ids":["https://openalex.org/I2250955327"]},{"raw_affiliation_string":"Huawei, China","institution_ids":["https://openalex.org/I2250955327"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028720034","display_name":"Guancheng Lin","orcid":"https://orcid.org/0009-0009-8339-313X","observed_orcids":["https://orcid.org/0009-0009-8339-313X"]},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guancheng Lin","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China","School of Cyber Science and Engineering, Wuhan University, China"],"raw_orcid":"https://orcid.org/0009-0009-8339-313X","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047688641","display_name":"Xing Hu","orcid":"https://orcid.org/0000-0003-0093-3292","observed_orcids":["https://orcid.org/0000-0003-0093-3292"]},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xing Hu","raw_affiliation_strings":["The State Key Laboratory of Blockchain and Data Security, Zhejiang University, Ningbo, China","The State Key Laboratory of Blockchain and Data Security, Zhejiang University, China"],"raw_orcid":"https://orcid.org/0000-0003-0093-3292","affiliations":[{"raw_affiliation_string":"The State Key Laboratory of Blockchain and Data Security, Zhejiang University, Ningbo, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"The State Key Laboratory of Blockchain and Data Security, Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051403641","display_name":"Jacky Keung","orcid":"https://orcid.org/0000-0002-3803-9600","observed_orcids":["https://orcid.org/0000-0002-3803-9600"]},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Jacky Wai Keung","raw_affiliation_strings":["Department of Computer Science, City University of Hong Kong, Hong Kong, China","Department of Computer Science, City University of Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0002-3803-9600","affiliations":[{"raw_affiliation_string":"Department of Computer Science, City University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I168719708"]},{"raw_affiliation_string":"Department of Computer Science, City University of Hong Kong, China","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006669765","display_name":"Xin Xia","orcid":"https://orcid.org/0000-0002-6302-3256","observed_orcids":["https://orcid.org/0000-0002-6302-3256"]},"institutions":[{"id":"https://openalex.org/I2250955327","display_name":"Huawei Technologies (China)","ror":"https://ror.org/00cmhce21","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250955327"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Xia","raw_affiliation_strings":["Huawei, Hangzhou, China","Huawei, China"],"raw_orcid":"https://orcid.org/0000-0002-6302-3256","affiliations":[{"raw_affiliation_string":"Huawei, Hangzhou, China","institution_ids":["https://openalex.org/I2250955327"]},{"raw_affiliation_string":"Huawei, China","institution_ids":["https://openalex.org/I2250955327"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.899,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.86582406,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"34","issue":"3","first_page":"1","last_page":"37"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.993399977684021,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8026537895202637},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5632888078689575},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4920944571495056},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4398253560066223},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3442363142967224},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.32334235310554504},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1540154218673706}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8026537895202637},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5632888078689575},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4920944571495056},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4398253560066223},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3442363142967224},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.32334235310554504},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1540154218673706}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3699602","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3699602","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-3","norway-2"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"x_sdgs":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G1604382934","display_name":null,"funder_award_id":"6000796, 9229109, 9229098, 9220103, 9229029","funder_id":"https://openalex.org/F4320309893","funder_display_name":"City University of Hong Kong"}],"funders":[{"id":"https://openalex.org/F4320309893","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":108,"referenced_works":["https://openalex.org/W1566773348","https://openalex.org/W1932198206","https://openalex.org/W1979360936","https://openalex.org/W1995875735","https://openalex.org/W2025411198","https://openalex.org/W2027887391","https://openalex.org/W2079359777","https://openalex.org/W2113175552","https://openalex.org/W2132202037","https://openalex.org/W2133556223","https://openalex.org/W2134512579","https://openalex.org/W2137955320","https://openalex.org/W2187089797","https://openalex.org/W2266696196","https://openalex.org/W2304692780","https://openalex.org/W2401686019","https://openalex.org/W2415243320","https://openalex.org/W2467903332","https://openalex.org/W2476464413","https://openalex.org/W2753388234","https://openalex.org/W2766883061","https://openalex.org/W2790699127","https://openalex.org/W2794354396","https://openalex.org/W2822734516","https://openalex.org/W2895067255","https://openalex.org/W2898383220","https://openalex.org/W2911282308","https://openalex.org/W2912378279","https://openalex.org/W2912671384","https://openalex.org/W2914747561","https://openalex.org/W2962960733","https://openalex.org/W2964059111","https://openalex.org/W2965861627","https://openalex.org/W2971940447","https://openalex.org/W2972209102","https://openalex.org/W2977847339","https://openalex.org/W2981328759","https://openalex.org/W3007313497","https://openalex.org/W3016033821","https://openalex.org/W3016926230","https://openalex.org/W3033234605","https://openalex.org/W3033777149","https://openalex.org/W3042609801","https://openalex.org/W3086100325","https://openalex.org/W3087938565","https://openalex.org/W3089635645","https://openalex.org/W3091588759","https://openalex.org/W3094374491","https://openalex.org/W3097867666","https://openalex.org/W3098605233","https://openalex.org/W3102100346","https://openalex.org/W3106715802","https://openalex.org/W3127736190","https://openalex.org/W3127782461","https://openalex.org/W3132999523","https://openalex.org/W3147362533","https://openalex.org/W3159616622","https://openalex.org/W3161071537","https://openalex.org/W3166095789","https://openalex.org/W3174937647","https://openalex.org/W3177116043","https://openalex.org/W3180562345","https://openalex.org/W4200457136","https://openalex.org/W4221145227","https://openalex.org/W4223599364","https://openalex.org/W4224437660","https://openalex.org/W4233976623","https://openalex.org/W4238124605","https://openalex.org/W4242177601","https://openalex.org/W4250967164","https://openalex.org/W4251032397","https://openalex.org/W4281384435","https://openalex.org/W4281681567","https://openalex.org/W4285490400","https://openalex.org/W4285490489","https://openalex.org/W4286494280","https://openalex.org/W4287322212","https://openalex.org/W4289976167","https://openalex.org/W4297779771","https://openalex.org/W4301229630","https://openalex.org/W4303474858","https://openalex.org/W4308643994","https://openalex.org/W4308648329","https://openalex.org/W4308732630","https://openalex.org/W4312439220","https://openalex.org/W4312727366","https://openalex.org/W4313444134","https://openalex.org/W4315746341","https://openalex.org/W4320235690","https://openalex.org/W4364378064","https://openalex.org/W4378696973","https://openalex.org/W4380520352","https://openalex.org/W4380763529","https://openalex.org/W4384302784","https://openalex.org/W4384345641","https://openalex.org/W4384345661","https://openalex.org/W4384345694","https://openalex.org/W4384345705","https://openalex.org/W4386830545","https://openalex.org/W4388483660","https://openalex.org/W4390357286","https://openalex.org/W4392502597","https://openalex.org/W4393029443","https://openalex.org/W4393140556","https://openalex.org/W6782595193","https://openalex.org/W6816915232","https://openalex.org/W6838923433","https://openalex.org/W6856079215"],"related_works":["https://openalex.org/W2731899572","https://openalex.org/W2961085424","https://openalex.org/W3215138031","https://openalex.org/W4306674287","https://openalex.org/W4321369474","https://openalex.org/W3009238340","https://openalex.org/W4360585206","https://openalex.org/W4285208911","https://openalex.org/W3046775127","https://openalex.org/W3082895349"],"abstract_inverted_index":{"Deep":[0],"learning":[1,22,36,51,81],"has":[2],"demonstrated":[3],"its":[4],"effectiveness":[5],"in":[6,93,233,239,275],"software":[7],"vulnerability":[8,74,84,128,217,267,291],"detection,":[9],"but":[10],"acquiring":[11],"a":[12,53,248,301],"large":[13,302],"number":[14,303],"of":[15,110,137,143,146,230,235,241,251,261,304],"labeled":[16,32,66,180,252,273,287],"code":[17,59,99,115,152,173,181,305],"snippets":[18,60,100,116,153,174,182,186],"for":[19,82,194,299],"training":[20,70,102,114,155],"deep":[21,35,50,80],"models":[23,37,269],"is":[24],"challenging":[25],"due":[26],"to":[27,72,95,165,175,183,197,289],"labor-intensive":[28],"annotation.":[29],"With":[30],"limited":[31,65,286],"data,":[33,103],"complex":[34],"often":[38],"suffer":[39],"from":[40,179,285],"overfitting":[41],"and":[42,63,148,171,187,237,265],"poor":[43],"performance.":[44],"To":[45,120],"address":[46,121],"this":[47],"limitation,":[48],"semi-supervised":[49,79,127,211],"offers":[52],"promising":[54],"approach":[55],"by":[56,203],"annotating":[57],"unlabeled":[58,185],"with":[61,87,209,227],"pseudo-labels":[62,147],"utilizing":[64],"data":[67,253,274,288],"together":[68],"as":[69,101,140,154],"sets":[71],"train":[73],"detection":[75,85,129,268,292],"models.":[76],"However,":[77],"applying":[78],"accurate":[83],"comes":[86],"several":[88],"challenges.":[89],"One":[90],"challenge":[91],"lies":[92],"how":[94],"select":[96],"correctly":[97],"pseudo-labeled":[98,113,151],"while":[104],"another":[105],"involves":[106],"mitigating":[107],"the":[108,126,134,141,144,160,167,189,199,225,259,296],"impact":[109],"potentially":[111],"incorrectly":[112],"during":[117],"model":[118,138],"training.":[119],"these":[122],"challenges,":[123],"we":[124],"propose":[125],"(SSVD)":[130],"approach.":[131],"SSVD":[132,208,223,245,281],"leverages":[133],"information":[135],"gain":[136],"parameters":[139],"certainty":[142],"correctness":[145],"prioritizes":[149],"high-certainty":[150],"data.":[156],"Additionally,":[157],"it":[158],"incorporates":[159],"proposed":[161,190],"noise-robust":[162,191],"triplet":[163],"loss":[164,193],"maximize":[166],"separation":[168],"between":[169],"vulnerable":[170],"non-vulnerable":[172],"better":[176],"propagate":[177],"labels":[178],"nearby":[184],"utilizes":[188],"cross-entropy":[192],"gradient":[195],"clipping":[196],"mitigate":[198],"error":[200],"accumulation":[201],"caused":[202],"incorrect":[204],"pseudo-labels.":[205],"We":[206],"evaluate":[207],"nine":[210],"approaches":[212],"on":[213,247,271],"four":[214],"widely-used":[215],"public":[216],"datasets.":[218],"The":[219],"results":[220],"demonstrate":[221],"that":[222,280],"outperforms":[224],"baselines":[226],"an":[228],"average":[229],"29.82%":[231],"improvement":[232],"terms":[234,240],"F1-score":[236],"56.72%":[238],"MCC.":[242],"In":[243],"addition,":[244],"trained":[246,270],"certain":[249],"proportion":[250],"can":[254,282],"outperform":[255],"or":[256],"closely":[257],"match":[258],"performance":[260],"fully":[262],"supervised":[263],"LineVul":[264],"ReVeal":[266],"100%":[272],"most":[276],"scenarios.":[277],"This":[278],"indicates":[279],"effectively":[283],"learn":[284],"enhance":[290],"performance,":[293],"thereby":[294],"reducing":[295],"effort":[297],"required":[298],"labeling":[300],"snippets.":[306]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":1}],"updated_date":"2026-09-26T08:19:03.415552","created_date":"2025-10-10T00:00:00"}